Vulnerabilities > CVE-2019-12480 - Out-of-bounds Read vulnerability in Bacnet Protocol Stack Project Bacnet Protocol Stack

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

PARTIAL

network

low complexity

bacnet-protocol-stack-project

CWE-125

exploit available

NVD

Published: 2019-05-30

Updated: 2019-07-19

Summary

BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a malformed DCC in AtomicWriteFile, AtomicReadFile and DeviceCommunicationControl services. An unauthenticated remote attacker could cause a denial of service (bacserv daemon crash) because there is an invalid read in bacdcode.c during parsing of alarm tag numbers.

Vulnerable Configurations

Part	Description	Count
Application	Bacnet_Protocol_Stack_Project Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.1 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.2 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.3 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.4 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.5 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.6 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.7 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.8 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.0.9 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.1.0 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.2.0 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.2.1 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.2.2 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.2.3 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.2.4 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.2.5 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.2.6 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.3.0 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.3.1 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.3.2 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.3.3 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.3.4 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.3.5 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.3.6 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.4.0 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.4.1 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.4.2 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.4.3 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.4.4 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.4.5 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.4.6 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.4.7 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.0 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.1 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.2 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.3 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.4 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.5 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.6 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.7 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.8 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.5.9 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.6.0 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.6.1 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.6.2 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.6.3 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.6.4 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.6.5 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.7.0 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.7.1 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.7.2 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.7.3 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.7.4 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.7.5 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.8.0 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.8.1 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.8.2 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.8.3 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.8.4 Bacnet Protocol Stack Project Bacnet Protocol Stack 0.8.6	60

Common Weakness Enumeration (CWE)

CWE-125 - Out-of-bounds Read

Common Attack Pattern Enumeration and Classification (CAPEC)

Overread Buffers
An adversary attacks a target by providing input that causes an application to read beyond the boundary of a defined buffer. This typically occurs when a value influencing where to start or stop reading is set to reflect positions outside of the valid memory location of the buffer. This type of attack may result in exposure of sensitive information, a system crash, or arbitrary code execution.

Exploit-Db

id	EDB-ID:47148
last seen	2019-07-22
modified	2019-07-22
published	2019-07-22
reporter	Exploit-DB
source	https://www.exploit-db.com/download/47148
title	BACnet Stack 0.8.6 - Denial of Service

Packetstorm

data source	https://packetstormsecurity.com/files/download/153716/bacnetstack086-dos.txt
id	PACKETSTORM:153716
last seen	2019-07-26
published	2019-07-23
reporter	mmorillo
source	https://packetstormsecurity.com/files/153716/BACnet-Stack-0.8.6-Denial-Of-Service.html
title	BACnet Stack 0.8.6 Denial Of Service

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

Common Attack Pattern Enumeration and Classification (CAPEC)

Exploit-Db

Packetstorm

References